DirectoryIndex index.php

<IfModule mod_negotiation.c>
    Options -MultiViews
</IfModule>

<IfModule mod_rewrite.c>
    RewriteEngine On

    # Preserve real static files and directories.
    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    RewriteRule ^ - [L]

    # Send all application requests through the single front controller.
    RewriteRule ^ index.php [QSA,L]
</IfModule>

<IfModule mod_authz_core.c>
    <FilesMatch "^\.(?!well-known)">
        Require all denied
    </FilesMatch>
    <FilesMatch "\.(?:env|ini|log|sql|sqlite|bak|dist|sh|md|lock)$">
        Require all denied
    </FilesMatch>
</IfModule>

<IfModule mod_headers.c>
    Header always unset X-Powered-By
    Header always set X-Content-Type-Options "nosniff"

    <FilesMatch "\.(?:css|js|png|jpg|jpeg|gif|svg|webp|ico|woff2)$">
        Header set Cache-Control "public, max-age=3600"
    </FilesMatch>
</IfModule>
